1012609-ldap-roles - properly remove and reload roles from ldap user

1012609-ldap-roles - error if save fails